diff options
author | Pravin B Shelar <pshelar@nicira.com> | 2014-10-16 21:55:45 -0700 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2014-10-17 16:49:34 -0400 |
commit | f47de068f68db91b89e0d3335230d07e02da8727 (patch) | |
tree | 79aa16d0cb522b71b3ed0e73cd63a56cb1ec33ec /crypto/af_alg.c | |
parent | 7a9f526fc3ee49b6034af2f243676ee0a27dcaa8 (diff) | |
download | op-kernel-dev-f47de068f68db91b89e0d3335230d07e02da8727.zip op-kernel-dev-f47de068f68db91b89e0d3335230d07e02da8727.tar.gz |
openvswitch: Create right mask with disabled megaflows
If megaflows are disabled, the userspace does not send the netlink attribute
OVS_FLOW_ATTR_MASK, and the kernel must create an exact match mask.
sw_flow_mask_set() sets every bytes (in 'range') of the mask to 0xff, even the
bytes that represent padding for struct sw_flow, or the bytes that represent
fields that may not be set during ovs_flow_extract().
This is a problem, because when we extract a flow from a packet,
we do not memset() anymore the struct sw_flow to 0.
This commit gets rid of sw_flow_mask_set() and introduces mask_set_nlattr(),
which operates on the netlink attributes rather than on the mask key. Using
this approach we are sure that only the bytes that the user provided in the
flow are matched.
Also, if the parse_flow_mask_nlattrs() for the mask ENCAP attribute fails, we
now return with an error.
This bug is introduced by commit 0714812134d7dcadeb7ecfbfeb18788aa7e1eaac
("openvswitch: Eliminate memset() from flow_extract").
Reported-by: Alex Wang <alexw@nicira.com>
Signed-off-by: Daniele Di Proietto <ddiproietto@vmware.com>
Signed-off-by: Andy Zhou <azhou@nicira.com>
Signed-off-by: Pravin B Shelar <pshelar@nicira.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'crypto/af_alg.c')
0 files changed, 0 insertions, 0 deletions